Share this article
Atomic Wallet Hackers Use THORChain to Conceal Stolen $35M Funds
The hackers, believed to be North Korean hacking group Lazarus, have been using cross-chain bridges and liquidity protocols to mix stolen funds.
Updated Jun 20, 2023, 12:21 p.m. Published Jun 20, 2023, 10:55 a.m.
Hackers that targeted crypto wallet Atomic Wallet in a $35 million heist earlier this month have used cross-chain liquidity protocol THORChain to conceal their ill-gotten gains, according to blockchain sleuth MistTrack.
MistTrack states that 503.08 ether , or around $870,000, connected to the hack was transferred to THORChain in the last two days before being swapped for bitcoin .
STORY CONTINUES BELOW
Don't miss another story.Subscribe to the Crypto Daybook Americas Newsletter today. See all newsletters
Some of the stolen ether was also bridged to multiple bitcoin addresses using the Swft blockchain, MistTrack said.
Last week, the hackers moved a portion of stolen funds to crypto exchange Garantex, which was sanctioned by the Office of Foreign Assets Control (OFAC) of the U.S. Treasury last April.
Blockchain security firm Elliptic said that it believes North Korean hacking group Lazarus are behind the attack.
THORChain's native token (RUNE) remains stable following the string of hack-related transactions, it trades at 84 cents having risen slightly in the past 24-hours, according to CoinMarketCap.
More For You
What to know:
- As of October 2025, GoPlus has generated $4.7M in total revenue across its product lines. The GoPlus App is the primary revenue driver, contributing $2.5M (approx. 53%), followed by the SafeToken Protocol at $1.7M.
- GoPlus Intelligence's Token Security API averaged 717 million monthly calls year-to-date in 2025 , with a peak of nearly 1 billion calls in February 2025. Total blockchain-level requests, including transaction simulations, averaged an additional 350 million per month.
- Since its January 2025 launch , the $GPS token has registered over $5B in total spot volume and $10B in derivatives volume in 2025. Monthly spot volume peaked in March 2025 at over $1.1B , while derivatives volume peaked the same month at over $4B.
More For You
Bhutan Debuts TER Gold-Backed Token on Solana
The Himalayan kingdom introduced TER, a Solana-based token backed by physical gold and issued through Gelephu Mindfulness City.
What to know:
- Bhutan introduced TER, a sovereign-supported gold-backed token issued via Gelephu Mindfulness City and custodied by DK Bank, offering a blockchain-based representation of physical gold.
- The token runs on Solana, giving international investors digital portability and on-chain transparency while mimicking the experience of traditional gold purchases.
- TER follows Kyrgyzstan’s USDKG launch, highlighting a growing trend of smaller nations issuing asset-backed digital currencies tied to audited reserves as part of broader economic and technological strategies.
Top Stories
